From mboxrd@z Thu Jan 1 00:00:00 1970 From: Adolf Belka To: development@lists.ipfire.org Subject: [PATCH 1/2] ipblocklist-sources: Update to include the 3CORESec ip blocklists Date: Mon, 24 Jun 2024 17:10:38 +0200 Message-ID: <20240624151039.51194-1-adolf.belka@ipfire.org> MIME-Version: 1.0 Content-Type: multipart/mixed; boundary="===============2787095676907811857==" List-Id: --===============2787095676907811857== Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: quoted-printable - The patch for this was created by Stefan Schantl - Blocklist addition was discussed and agreed at IPFire dev conf call in June= 2024. - Tested on vm system. - The combined list was removed because it is just the three others which can= be selected in the WUI to give the equivalent result. Created-by: Stefan Schantl Tested-by: Adolf Belka Signed-off-by: Adolf Belka --- config/ipblocklist/sources | 20 +++++++++++++++++++- 1 file changed, 19 insertions(+), 1 deletion(-) diff --git a/config/ipblocklist/sources b/config/ipblocklist/sources index 0835c0f9c..69f964dd9 100644 --- a/config/ipblocklist/sources +++ b/config/ipblocklist/sources @@ -124,5 +124,23 @@ our %sources =3D ( 'EMERGING_FWRULE' =3D> { 'name' = =3D> 'Emerging Threats Blocklis 'info' =3D> 'https://www.blocklist.d= e', 'parser' =3D> 'ip-or-net-list', 'rate' =3D> '30m', - 'category' =3D> 'attacker' } + 'category' =3D> 'attacker' }, + '3CORESEC_SSH' =3D> { 'name' =3D> '3CORESec SSH Activity= Blocklist', + 'url' =3D> 'https://blacklist.3coresec.net/lists/ssh.txt', + 'info' =3D> 'https://blacklist.3coresec.net', + 'parser' =3D> 'ip-or-net-list', + 'rate' =3D> '1d', + 'category' =3D> 'attacker' }, + '3CORESEC_SCAN' =3D> { 'name' =3D> '3CORESec Scan and IDS= Blocklist', + 'url' =3D> 'https://blacklist.3coresec.net/lists/misc.txt', + 'info' =3D> 'https://blacklist.3coresec.net', + 'parser' =3D> 'ip-or-net-list', + 'rate' =3D> '1d', + 'category' =3D> 'reputation' }, + '3CORESEC_WEB' =3D> { 'name' =3D> '3CORESec Web Server Activit= y Blocklist', + 'url' =3D> 'https://blacklist.3coresec.net/lists/http.txt', + 'info' =3D> 'https://blacklist.3coresec.net', + 'parser' =3D> 'ip-or-net-list', + 'rate' =3D> '1d', + 'category' =3D> 'attacker' } ); --=20 2.45.2 --===============2787095676907811857==--